Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7iWUOY8FfgXzCp43ZZNEQytR92w.roa
File: 7iWUOY8FfgXzCp43ZZNEQytR92w.roa (raw, json)
Hash identifier: aWBLZIOmvHJaHBDV5R/0/8l36MeHD3DptuGmfgCIb8w=
Subject key identifier: EE:25:94:39:8F:05:7E:05:F3:0A:9E:37:65:93:44:43:2B:51:F7:6C
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 07F42C5E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7iWUOY8FfgXzCp43ZZNEQytR92w.roa
Signing time: Wed 23 Feb 2022 08:45:20 +0000
ROA not before: Wed 23 Feb 2022 08:45:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.140.0/22 maxlen: 22
178.254.160.0/22 maxlen: 22
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.184.0/21 maxlen: 21
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.32.0/21 maxlen: 21
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.236.0/22 maxlen: 22
109.111.244.0/24 maxlen: 24
109.111.240.0/20 maxlen: 24
109.111.247.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133442654 (0x7f42c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Feb 23 08:45:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee2594398f057e05f30a9e37659344432b51f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:3b:7d:14:54:5c:5f:42:1a:92:50:06:5d:
89:78:61:4f:0b:c8:60:5a:17:ab:a8:4c:b4:95:f7:
b4:09:cc:6b:d4:93:7e:18:47:0d:23:36:41:b4:97:
d7:01:12:e9:cc:36:30:82:fb:d7:78:12:9b:19:39:
de:8e:25:e7:e4:47:c7:ea:be:bb:52:3e:e4:1a:62:
8a:e4:9c:fb:74:9d:13:d5:25:b7:bd:01:f3:8f:cb:
ff:45:3a:dd:b5:b4:bc:f4:26:1f:9d:a1:8c:2b:49:
b4:e9:de:78:17:cf:3b:c4:c5:2e:40:ef:27:79:8f:
d4:5a:0a:5c:9f:09:38:66:b7:42:5b:84:92:ae:8b:
6c:a9:dc:19:f4:6c:b1:2d:3b:e3:71:59:6b:76:89:
f0:82:41:7a:09:25:f9:53:c5:fb:68:90:ee:e0:d2:
5e:1d:23:59:52:ff:3d:46:f7:6e:1c:07:5b:c6:44:
84:f6:83:14:4e:00:57:2b:53:c4:8a:00:f7:81:a6:
2c:01:cb:d0:21:95:7d:ff:92:66:bf:5a:f0:d1:34:
db:21:5c:bf:89:07:8b:d8:82:0d:7b:55:2d:4b:77:
e6:0c:09:67:13:00:16:8e:7c:49:67:fb:62:d3:a3:
f2:f7:b3:6c:56:d5:9e:aa:de:67:a5:a3:83:50:b4:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:94:39:8F:05:7E:05:F3:0A:9E:37:65:93:44:43:2B:51:F7:6C
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7iWUOY8FfgXzCp43ZZNEQytR92w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/21
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0/19
178.254.128.0-178.254.163.255
178.254.169.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/21
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
a4:d9:6b:77:c4:5d:9f:e7:4c:f7:ac:06:21:41:0a:7d:be:e6:
9e:a9:ac:c3:5b:89:45:e4:a0:d5:fd:0c:5a:3e:be:9b:07:53:
00:90:50:aa:ac:41:55:21:48:60:40:bf:67:a2:d3:a4:d8:d5:
55:fe:dc:4e:ed:b1:63:bc:75:26:90:4b:e0:d4:0e:ce:51:50:
f9:ac:5a:d1:92:ab:21:fe:32:0e:4a:61:6e:e7:b8:b5:8e:0b:
e6:a6:18:5b:95:0b:b4:81:c4:89:fa:be:d7:db:d6:9b:c8:89:
63:ab:81:dd:84:92:85:af:88:3d:67:24:ae:99:3c:7e:f0:19:
db:e7:8f:26:d5:8e:8c:7d:47:ea:85:53:37:90:4a:33:7c:8e:
45:34:99:3f:9e:01:c8:36:3f:48:54:f8:b8:a3:77:4d:cb:fa:
a7:28:47:82:65:82:d3:55:1d:ce:b4:df:5c:14:a8:09:c4:9e:
92:5e:14:a8:73:14:16:3b:04:e6:06:62:5e:c7:b8:27:25:89:
30:97:24:98:38:96:e3:9c:92:84:2e:9b:bb:51:04:d5:b7:24:
b1:96:57:68:47:a0:cd:f2:1a:27:d6:0c:5c:35:09:84:91:72:
b4:18:75:28:70:4d:2c:6f:0a:72:50:5b:b9:40:0f:90:3c:bd:
76:c2:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net